From 3c2d496f45426694d7d0aa004fa82304fee31e3c Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sat, 7 Feb 2026 13:35:58 +0000
Subject: [PATCH] [ci skip] Add --api.insecure=true to Traefik for dashboard
 access on port 8080

---
 modules/kubernetes/traefik/main.tf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/modules/kubernetes/traefik/main.tf b/modules/kubernetes/traefik/main.tf
index 539efdbd..9defd43b 100644
--- a/modules/kubernetes/traefik/main.tf
+++ b/modules/kubernetes/traefik/main.tf
@@ -85,6 +85,10 @@ resource "helm_release" "traefik" {
             enabled = true
           }
         }
+        http3 = {
+          enabled = true
+        }
+        advertisedPort = 443
       }
       dns-udp = {
         port        = 5353
@@ -136,6 +140,7 @@ resource "helm_release" "traefik" {
     }
 
     additionalArguments = [
+      "--api.insecure=true",
       "--global.checknewversion=false",
       "--global.sendanonymoususage=false",
       # Increase timeouts for services like Immich